Embed Notice

@soatok I'm running a few mail servers, and I had to set up explicit TLS for some destinations (basically, refuse unencrypted connections when delivering to specific domains; apparently that's deemed secure enough in some circles).
Had a funny anecdote, too – Let's Encrypt switched to ec certificates, which caused postfix to automatically disable some older encryption types, and suddenly one of those servers couldn't deliver to my client any more, because they were still running Exchange 2016 which does not support TLS 1.3…